che icon indicating copy to clipboard operation
che copied to clipboard

Unable to connecto to Red Hat Developer Sandbox

Open labkeeper opened this issue 7 months ago • 2 comments

Describe the bug

I've created Red Hat Developer Sandbox with Openshift, Openshift Virtualization and DevSpaces features. In Openshift I see 2 namespaces:

  • XXXX-dev
  • openshift-virtualization-os-images

I'm sure, I'm in namepsace XXXX-dev:

oc project -q
XXXX-dev

When I try to connect to the running workspace I get following error from the Gateway application:

HTTP response code: 403
HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"devworkspaces.workspace.devfile.io is forbidden: User \"XXXX\" cannot list resource \"devworkspaces\" in API group \"workspace.devfile.io\" in the namespace \"openshift-virtualization-os-images\"","reason":"Forbidden","details":{"group":"workspace.devfile.io","kind":"devworkspaces"},"code":403}

HTTP response headers: {audit-id=[0ed5f296-0795-43fa-928e-87d917963836], cache-control=[no-cache, private], content-length=[387], content-type=[application/json], date=[Sat, 10 May 2025 19:48:42 GMT], strict-transport-security=[max-age=31536000; includeSubDomains; preload], x-content-type-options=[nosniff], x-kubernetes-pf-flowschema-uid=[aba19751-5f7b-4e05-9bb8-c58efda25168], x-kubernetes-pf-prioritylevel-uid=[bd96ae22-5230-41ef-8353-237943a48426]}

Che version

other (please specify in additional context)

Steps to reproduce

Create Red Hat Developer Sandbox with Virtualization and Dev Spaces and it should be reproduced.

Expected behavior

It should search in all namespaces, without any influence from namespaces with no permitted devspaces.

Runtime

OpenShift

Screenshots

No response

Installation method

other (please specify in additional context)

Environment

other (please specify in additional context), Dev Sandbox (workspaces.openshift.com)

Eclipse Che Logs


Additional context

It's current as of today version of Dev Sandbox.

labkeeper avatar May 10 '25 19:05 labkeeper

Hello @labkeeper, A user doesn't have permission to list DW objects outside their own namespace.

tolusha avatar May 13 '25 09:05 tolusha

Hello @labkeeper could you be more specific on this part:

When I try to connect to the running workspace I get following error from the Gateway application:

Is this using IntelliJ Gateway? Could you provide a screenshot?

dkwon17 avatar May 13 '25 15:05 dkwon17

Closing since I can not reproduce 🤷 Was able to successfully connect to Developer Sandbox using the latest version of the Gateway plugin.

Image

Feel free to re-open

ibuziuk avatar Jun 24 '25 16:06 ibuziuk